We performed a comparison between Barracuda Web Application Firewall and Fortinet FortiWeb based on real PeerSpot user reviews.
Find out in this report how the two Web Application Firewall (WAF) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The most valuable feature is the rule set."
"The solution offers multiple security features. There are machine learning features and great URL encryption. It also offers multi-protocol support against DDoS attacks."
"The most valuable feature of this solution is the simplicity of configuration."
"The updating and signature features are my primary use case for the solution. These features are beneficial to my organization."
"The stability of the product is good. Stability-wise, I rate the solution a ten out of ten."
"It significantly improved our overall web security posture, addressing intrusions and enhancing control over web URLs in our environment."
"Setup of this solution is straightforward. It's a stable and scalable solution, with good performance and fast technical support."
"The most valuable features are the client VPN and content filtering."
"One main feature we are very happy about is file security and upload functionality."
"The most valuable feature is the attack signature and machine learning."
"Also, if you serve files or you accept files with your server, Fortiweb has built-in antivirus. The Fortinet product family also provides good IP intelligence (botnet C&C, etc.)."
"The policies and the filtering are the most valuable features, especially traffic, URL, and application filtering. The solution is excellent at detecting vulnerabilities."
"It's the extra security that is the most valuable feature. You have insight into your traffic. There are some great insights into what utilities hackers are trying to exploit. It blocks a lot of stuff from the internet."
"FortiWeb offers machine learning in the latest product. This fixed many problems. There are no false negatives."
"It's easy to use and allows us to integrate solutions together."
"The most valuable feature of this solution is Fail-Open."
"The solution needs to leverage some additional features to a broader scale of software-defined networks."
"I would like to see better controlling of the traffic."
"The documentation is lacking. It's not like what you'd get if you were using Juniper or Cisco. They need to expand on it and make it more useful."
"There are issues when upgrading firewalls and we experience different issues across customers."
"This product could easily progress to be among the industry leaders. I think they need to improve enterprise level automation. It integrates with a small number of vulnerability scanners, so report results should be imported manually; same for SIEM integration."
"They should improve their features, so they easily compare to the competition."
"One of Barracuda's limitations is its user interface. The GUI for configuration is not intuitive and has remained largely unchanged for the past 10 to 12 years."
"An area for improvement in Barracuda Web Application Firewall is attack identification. Other banks identified attacks and tracked logs that the solution wasn't able to identify because of its ready-made rules pre-deployed by the vendor. My organization raised this issue with the technical support team. Another area to improve in Barracuda Web Application Firewall is its service desk. The team resorted to stonewalling because they couldn't accept that a feature was missing in the solution, and it was only after a lot of drilling down that the service desk team accepted that, and would be adding that feature in the future. My organization had to submit a report to the Reserve Bank of India with information on the logs identified and the attacks that happened, and that there was a failure on the part of the Barracuda Web Application Firewall. The Reserve Bank of India conducts a tri-monthly cyber risk audit in all Indian banks. Even smaller banks identified and caught attacks that my organization wasn't able to do, so I was looking into other solutions that competitor banks could be using because Barracuda Web Application Firewall failed to identify some of the attacks."
"The solution could offer more integration opportunities."
"A better load balancer is needed when multiple servers are used for the same website."
"FortiWeb does not exist in a cloud-based form. Its only available for deployment as a virtual appliance on AWS and Azure IaaS platforms. Because of the trend to WAF environments, it would be good to have it as a SaaS. Also, FortiWeb would be more competitive if it combined WAF and DDoS protection."
"The initial setup process could be improved."
"The interface could have the interdependent elements arranged sequentially and wizards that go through most common deployment actions."
"The product’s stability could be improved."
"We use Kubernetes, so I would like to have a plugin to configure FortiWeb Cloud automatically using Kubernetes Ingress. That would reduce the complexity of setting up an Ingress object in Kubernetes. Some competing solutions help you configure Ingress and Kubernetes automatically."
"Another area for improvement is logging. When troubleshooting, the logs sometimes take a while to update. We've had people report that some things aren't logged if they're successful. It's a bit hit-and-miss. For example, sometimes people access one of our services, and it's successful, but we don't see that in the logs."
More Barracuda Web Application Firewall Pricing and Cost Advice →
Barracuda Web Application Firewall is ranked 14th in Web Application Firewall (WAF) with 38 reviews while Fortinet FortiWeb is ranked 4th in Web Application Firewall (WAF) with 83 reviews. Barracuda Web Application Firewall is rated 8.2, while Fortinet FortiWeb is rated 8.0. The top reviewer of Barracuda Web Application Firewall writes "Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises". On the other hand, the top reviewer of Fortinet FortiWeb writes "Cost-effective, easy to configure, and works very well as a single solution for multiple environments". Barracuda Web Application Firewall is most compared with F5 Advanced WAF, Microsoft Azure Application Gateway, HAProxy, Kemp LoadMaster and Radware Alteon, whereas Fortinet FortiWeb is most compared with F5 Advanced WAF, Fortinet FortiADC, AWS WAF, Azure Web Application Firewall and Microsoft Azure Application Gateway. See our Barracuda Web Application Firewall vs. Fortinet FortiWeb report.
See our list of best Web Application Firewall (WAF) vendors.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.